Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/b193c3b1-bedd-32af-9d50-dc34e8bdfa3b.roa
File:                     b193c3b1-bedd-32af-9d50-dc34e8bdfa3b.roa (raw, json)
Hash identifier:          /DgfA6AMbYZsNKoRZccYNhKtmPvCLQ6C1bkxoGR3+Uk=
Subject key identifier:   6D:05:5B:69:45:C7:82:5B:3F:2E:94:FC:D1:69:0D:A1:D4:4B:19:3E
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F4328584B4E770694A54249B843A34C88
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/b193c3b1-bedd-32af-9d50-dc34e8bdfa3b.roa
Signing time:             Thu 25 Sep 2025 01:00:33 +0000
ROA not before:           Thu 25 Sep 2025 01:00:33 +0000
ROA not after:            Wed 24 Dec 2025 02:00:33 +0000
asID:                     29802
IP address blocks:        104.164.4.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:4e:77:06:94:a5:42:49:b8:43:a3:4c:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Sep 25 01:00:33 2025 GMT
            Not After : Dec 24 02:00:33 2025 GMT
        Subject: CN=dec21398-62be-45b1-b941-1e2f3b960d3e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:71:d9:8e:ce:db:f7:e8:ca:b8:23:4a:94:bd:
                    58:13:51:de:89:56:11:4e:aa:73:f8:32:62:be:90:
                    ac:3c:01:4a:62:4d:db:c3:5f:72:bd:33:95:8b:ac:
                    ca:b1:2e:83:99:fe:31:12:6a:61:15:0a:a2:3b:79:
                    37:c5:54:01:92:b1:2b:dc:46:31:86:1b:a0:16:b1:
                    01:0a:52:78:2e:d3:8b:0e:d4:46:ac:4e:11:02:6f:
                    20:95:72:12:37:94:88:1d:e3:e8:44:c5:d7:0b:b5:
                    73:13:31:05:6c:dc:37:a1:ba:01:eb:d8:b7:0a:77:
                    58:18:4c:7d:a2:72:76:92:c4:65:eb:6e:ae:d0:45:
                    1e:04:7b:b1:35:a9:f0:b5:4f:4e:ff:72:ac:da:91:
                    42:b6:e4:bb:db:d9:f4:8c:cf:97:41:fa:af:df:17:
                    3b:54:dd:97:34:d7:dd:30:66:90:8d:f3:88:3f:e3:
                    1c:c9:4e:40:b0:1f:37:e1:a0:91:5a:72:df:72:03:
                    db:9a:6f:de:53:6c:1f:6a:b8:9c:24:30:7a:ee:06:
                    79:9a:14:89:e7:e5:37:9d:43:d1:d3:e0:91:8c:49:
                    72:f1:4b:62:86:72:c2:58:4d:f6:ba:9d:9e:63:a9:
                    fb:02:d4:3d:c6:f4:d1:74:ce:0b:1a:d6:71:eb:14:
                    e7:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:05:5B:69:45:C7:82:5B:3F:2E:94:FC:D1:69:0D:A1:D4:4B:19:3E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/b193c3b1-bedd-32af-9d50-dc34e8bdfa3b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.164.4.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         08:e3:a5:87:c6:25:c0:98:aa:db:b3:d0:c4:6f:06:a8:a9:e9:
         c9:29:52:a5:11:1f:80:ee:34:ef:6e:4a:7a:29:f4:20:d7:86:
         f9:bb:b9:d5:bf:33:4a:13:23:3d:55:f1:e0:50:4a:95:7a:46:
         28:54:35:ec:a4:43:29:9a:2f:e6:54:ba:a2:ca:ec:22:4d:55:
         4f:33:f4:3c:19:91:c6:ff:0d:2e:c8:76:9e:49:71:54:0c:e4:
         e5:b6:19:b9:ee:1f:01:89:95:fe:29:bf:65:54:b5:b8:68:ce:
         0c:76:47:13:8a:08:16:72:c1:68:e4:b5:26:da:2d:24:90:6a:
         ee:0c:aa:37:b0:c5:9a:d3:70:cd:63:b7:1f:76:c6:33:af:9c:
         43:05:0e:0b:04:2f:7e:95:34:7f:b4:18:65:f3:08:dc:a9:d5:
         fb:bf:3b:59:9b:00:14:a2:78:93:45:c5:ef:26:91:b1:56:12:
         83:97:d5:3f:59:1d:47:8a:8f:2e:e4:f3:b5:8c:33:0c:d5:34:
         7a:1d:1a:21:fe:f9:b4:52:73:d3:8c:48:4b:ec:a2:a4:e8:65:
         81:e6:45:58:41:77:8e:e6:21:30:d4:88:5d:32:b8:c3:74:44:
         e8:57:42:0e:f1:bb:18:20:a8:4a:97:70:8e:c9:30:58:07:af:
         e1:e5:d6:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 11 11:13:35 2025 by rpki-client